Embedded Penetration Tester
- Praktyki
- CI/CD, DevSecOps
Tech stack: Secure boot, firmware security, OTA updates. Cryptography (AES, RSA, ECC) & hardware security (TPM, HSM, Trust
Zone). Embedded interfaces & protocols: CAN, LIN, Modbus, BLE, Wi-Fi, TCP/IP. Penetration testing on embedded targets: JTAG, UART, SPI, I²C. Cloud IoT platforms & secure communication: AWS/Azure/GCP IoT, TLS/DTLS, MQTT(S). Secure code review (C/C++, Rust, Python) & DevSecOps / CI/CD security.
Proven experience in embedded systems, IoT security, or product cybersecurity. Hands-on knowledge of secure boot, firmware protection, code signing, and secure update mechanisms. Deep understanding of cryptography and key management in embedded environments.
Experience securing communication protocols and network interfaces in connected devices. Knowledge of IoT authentication, authorization, and cloud security architectures. Experience with threat modeling methodologies such as STRIDE, DREAD, and Attack Trees.
Ability to perform security risk assessments aligned with: ISO 21434, IEC 62443, ISO 27005. Understanding of common embedded attack vectors: side-channel attacks, fault injection, firmware tampering, replay attacks, MITM attacks. Experience conducting penetration testing on embedded targets using interfaces such as JTAG, UART, SPI, and I²C.
Experience with fuzz testing communication stacks (CAN, TCP/IP, MQTT). Understanding of secure SDLC principles, DevSecOps, and cybersecurity lifecycle management. Knowledge of vulnerability management, system h